July 2018 - cypherpunks-legacy@lists.ogf.org

Security Update 2002-08-02 for OpenSSL, Sun RPC, mod_ssl
by Product Security 06 Jul '18

06 Jul '18

<security-announce.lists.apple.com> List-Post: <mailto:security-announce@lists.apple.com> List-Help: <mailto:security-announce-request@lists.apple.com?subject=help> List-Subscribe: <http://www.lists.apple.com/mailman/listinfo/security-announce>, <mailto:security-announce-request@lists.apple.com?subject=subscribe> List-Archive: <http://www.lists.apple.com/archives/security-announce/> Date: Fri, 2 Aug 2002 15:45:34 -0700 -----BEGIN PGP SIGNED MESSAGE----- Security Update 2002-08-02 is now available. It contains fixes for recent vulnerabilities in: OpenSSL: Fixes security vulnerabilities CAN-2002-0656, CAN-2002-0657, CAN-2002-0655, and CAN-2002-0659. Details are available via: http://www.cert.org/advisories/CA-2002-23.html mod_ssl: Fixes CAN-2002-0653, an off-by-one buffer overflow in the mod_ssl Apache module. Details are available via: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0653 Sun RPC: Fixes CAN-2002-039, a buffer overflow in the Sun RPC XDR decoder. Details are available via: http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823 Affected systems: Mac OS X client and Mac OS X Server Note: Mac OS X client is configured by default to have these services turned off, and is only vulnerable if the user has enabled network services which rely on the affected components. It is still recommended for Mac OS X client users to apply this security update to their system. System requirements: Mac OS X 10.1.5 Security Update 2002-08-02 may be obtained from: * Software Update pane in System Preferences * Apple's Software Downloads web site: http://docs.info.apple.com/article.html?artnum=120139 SSL server: https://depot.info.apple.com/security/129403bc5e184e3b7367.html To help verify the integrity of Security Update 2002-08-02 from the Software Downloads web site: The download file is titled: SecurityUpd2002-08-02.dmg Its SHA-1 digest is: 54f6eebe0398181db8f1129403bc5e184e3b7367 Information will also be posted to the Apple Product Security web site: http://www.apple.com/support/security/security_updates.html This message is signed with Apple's Product Security PGP key, and details are available at: http://www.apple.com/support/security/security_pgp.html -----BEGIN PGP SIGNATURE----- Version: PGP 7.0.3 iQEVAwUBPUsLOiFlYNdE6F9oAQGAigf+JV+lazuko1g4oZSNFTd2puXCtOGQ0M8c 2cZ/BdaEBA8jLGrPkhWuvmMwpN9z6G9chnN8s9EXiavcBG5e/ejtTo3ZHoOGP7bg 789zLQLK2JTB75nc0fNyx2CdfHlEIM00v8c2jXySLlnqF+kzwqVnjUL7i2O97Fk5 tWXLc2dWK2Nf2SUk0/yLgfjceZKEPCPXTpuKYuah/w9NwzL+LsbPcfXA/H1f4ngc vRPc2sn2HYu9IJw/BrMEsDlS8IWHf6ozXdZ9qaVCVRrZlsd9gSSmB2Jba4be/MRX FauTTepMF9+JfCkx+2wtpwWhBcXoJnjwIZXOXwbbRjqXHmzzgu8D/Q== =fdGO -----END PGP SIGNATURE----- _______________________________________________ security-announce mailing list | security-announce(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/security-announce Do not post admin requests to the list. They will be ignored. --- end forwarded text Verified version with verification failure ---

1 0

[Mac_crypto] "Security Update 2002-08-02 for OpenSSL, Sun RPC,
by Fearghas McKay 06 Jul '18

06 Jul '18

mod_ssl" does not verify Sender: mac_crypto-admin(a)vmeng.com Date: Sat, 3 Aug 2002 08:38:50 +0100 **A verification of this security announcement mail fails** The key is signed by Vinnie Moscaritolo - vinnie(a)vmeng.com which is a good thing even if Vinnie is no longer at Apple ( which is a bad thing ), it is also signed by someone who does not appear on any of the public keyservers that I can find which is a bit disappointing. Verified version is at the bottom. f --- begin forwarded text

1 0

None
by None 06 Jul '18

06 Jul '18

<snip...> --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

None
by None 06 Jul '18

06 Jul '18

This is the Postfix program at host bullae.ibuc.com. I'm sorry to have to inform you that the message returned below could not be delivered to one or more destinations. For further assistance, please send mail to <postmaster> If you do so, please include this problem report. You can delete your own text from the message returned below. The Postfix program <measl(a)mfn.org>: host mx1.mfn.org[204.238.179.8] said: 554 <user-119ac85.biz.mindspring.com[66.149.49.5]>: Client host rejected: We do not accept mail from .biz (in reply to RCPT TO command)

1 0

Re: More on "new physics"
by Declan McCullagh 06 Jul '18

06 Jul '18

On Sun, Oct 14, 2001 at 10:40:40AM -0700, Tim May wrote: > stuff about zero point energy and perpetual motion machines. And, > sometimes, mixed together with the usual nutcase stuff about the Hollow > Earth theory (zeta reticulans colonizing the hollow earth, Greys, > underground UFO bases, secret Nazi weapons, etc.). Righto. It's a staple of the UFO fringe. See: http://www.wired.com/news/culture/0,1284,43526,00.html >A briefing book the group handed out to reporters says mankind must >learn the truth about UFOs and switch to free energy and beam cars >before it's too late. And then there was this, which I wrote 2.5 years ago. Some folks, including I believe Tim, said at the time that I was being too uncritical, and looking back, they was right. It's a little painful to read; at the very least I should have reversed the order of the article. http://www.wired.com/news/technology/1,1282,19446,00.html >Much of the audience, though, is undeterred. They gather around the >stinking, wheezing mower and stare at it as if it were an alien >artifact recently recovered from Area 51. They are the perpetually >hopeful, the uncritical -- the groupies of the future energy movement. -Declan

1 0

None
by None 06 Jul '18

06 Jul '18

--- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

None
by None 06 Jul '18

06 Jul '18

1 0

Re: Entertainingly dangerous spam - Access and use your PC from anywhere
by None 06 Jul '18

06 Jul '18

> I received the following entertaining spam message. > Their product > "allows you to securely access and use your office computer > from any Web browser anytime, anywhere." > I wonder who else it allows to access from any web browser, anywhere :-) > [..] > GoToMyPC allows you to securely access and use your office computer from > any Web browser anytime, anywhere. > > TELEWORKERS: Work on your office computer from home, easily and securely, > with just an Internet connection. > TRAVELERS: Access and use your computer and files from hotels, airports, > Internet cafes anywhere with Web access. > AFTER-HOURS ACCESS: Access and use your office desktop, email and other > corporate resources after hours from any location connected to the Internet. > DEMONSTRATIONS: Invite your prospective buyers to remotely view your > computer screen for on-the-fly demos. > > Download The Free Trial Now! [..] Doesn't M$ XPlode offer this 'funtionality', ostensibly so your friends can remotely show you how to perform certain tasks with the OS?

1 0

Honeytrap reveals mass monitoring of downloaders (Paul Marks)
by Dewayne Hendricks 06 Jul '18

06 Jul '18

Paul Marks, *New Scientist*, 4 Sep 2012, via Dave Farber's IP http://www.newscientist.com/blogs/onepercent/2012/09/honeytrap-catches-copy… Anyone who has downloaded pirated music, video or ebooks using a BitTorrent client has probably had their IP address logged by copyright-enforcement authorities within 3 hours of doing so. So say computer scientists who placed a fake pirate server online - and very quickly found monitoring systems checking out who was taking what from the servers. The news comes from this week's SecureComm conference in Padua, Italy, where computer security researcher Tom Chothia and his colleagues at the University of Birmingham, UK, revealed they have discovered "massive monitoring" of BitTorrent download sites, such as the PirateBay, has been taking place for at least three years. BitTorrent is a data distribution protocol that splits an uploaded digital media file into many parts and shares it around a swarm of co-operating servers. Birmingham's fake server acted like a part of a file-sharing swarm and the connections made to it quickly revealed the presence of file-sharing monitors run by "copyright enforcement organisations, security companies and even government research labs". ... ------------------------------

1 0

None
by registration＠ifilm.com 06 Jul '18

06 Jul '18

1 0